$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: jILegwUpB24Va458cXq2UR5o/Y91cgyMa6ah8xcXA5c= Subject key identifier: FE:27:19:F1:A8:92:7D:69:F5:90:CD:D9:65:2B:65:F6:96:13:AD:B7 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 641160FEDD2C201B652302241D41DE0FC5DF07AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0323 Signing time: Tue 09 Sep 2025 03:01:12 +0000 Manifest this update: Tue 09 Sep 2025 02:56:12 +0000 Manifest next update: Fri 12 Sep 2025 03:12:12 +0000 Files and hashes: 1: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 2: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: iV9769MR/JLr5KYZhIH40Z21rewKIZDx3+/v8BKAq4U=) 3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: 8aTJRu9foQFYsb9vuOMv9v2Z6K/Xnx4JbU5S1Q47rNw=) 4: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 5: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 6: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:11:60:fe:dd:2c:20:1b:65:23:02:24:1d:41:de:0f:c5:df:07:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Sep 9 02:56:12 2025 GMT Not After : Sep 12 03:12:12 2025 GMT Subject: CN=FE2719F1A8927D69F590CDD9652B65F69613ADB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:b8:b1:c4:ca:d9:a1:d8:47:d1:53:94:ac: c1:a9:4e:2f:de:1c:ea:07:d5:c6:92:4c:4c:5c:8f: 58:10:f3:9e:7d:94:00:4f:da:e7:ee:a7:fe:c8:50: f4:58:3a:6a:26:4c:50:33:ad:bf:d3:ea:40:21:60: 89:05:78:bb:69:30:28:87:0e:0e:0c:46:4b:e2:7a: 3c:46:40:f8:6d:a0:55:d7:30:a4:e9:9d:16:13:03: 4d:62:66:e5:cb:6f:77:95:e9:4e:35:8f:b0:f0:21: ed:d2:e7:cb:f9:ca:2b:61:63:45:0a:70:ed:58:54: 8d:82:9e:24:d0:56:24:8f:f3:18:89:0a:04:39:64: ea:86:c8:0d:eb:c6:60:bf:64:9f:7f:9a:0d:58:77: 50:98:c3:a0:3d:4a:2a:6a:17:64:f1:c8:c2:85:58: 9c:36:f6:b4:6f:1b:5b:ff:0f:4a:ff:c3:4a:22:f5: ad:e2:8b:d0:a5:d0:9b:04:80:b1:39:3a:e4:bc:f3: fb:87:f6:ed:ba:7f:52:76:21:87:5c:54:7b:7a:a2: db:ce:99:e6:e7:bd:61:e5:3f:04:c4:0a:20:46:57: c4:c5:95:5b:2b:36:83:27:05:75:12:ec:45:60:35: d8:34:13:0f:83:03:69:46:54:ff:5e:a1:76:d2:aa: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:27:19:F1:A8:92:7D:69:F5:90:CD:D9:65:2B:65:F6:96:13:AD:B7 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:da:25:09:36:8d:4e:db:ce:7b:3f:c5:5d:d4:52:48:a9:c3: 4b:b9:8c:c6:c0:35:25:33:a1:37:51:55:0c:e2:53:ec:49:28: 82:cf:42:f8:80:69:67:ee:67:5f:6a:b1:32:f5:4e:98:ab:6d: 0f:0a:55:77:3b:e9:7a:33:9b:7c:33:8d:6f:94:d1:6c:26:fe: a1:82:24:8c:9f:b2:dc:20:32:03:83:ce:51:61:8d:34:70:9e: d3:e4:bf:6b:be:88:5f:ca:da:bc:65:90:85:f3:05:09:a6:8c: 79:5a:30:21:fb:e8:75:c7:4a:95:2f:52:d9:57:70:b4:2b:8d: 11:d2:5a:9b:a2:c0:b4:a3:1c:46:72:a3:9e:b2:b1:6e:4b:d0: a3:1f:79:32:d3:bc:78:80:d3:9d:90:ce:be:76:12:d8:2a:a2: 8d:ed:4f:c6:b3:9b:4e:52:07:d1:09:27:94:9c:ca:bf:c5:a6: 47:02:7c:bf:b9:3e:9f:09:67:dd:7f:6a:91:fa:5a:b8:34:2a: 46:80:aa:07:12:11:84:21:10:9b:c5:cb:18:61:70:c3:1f:fc: e6:47:b2:84:d0:01:83:35:9b:13:ff:cd:ce:18:bc:8d:28:1f: 42:49:29:ca:e6:8c:24:64:8d:f7:b5:25:07:69:96:77:bc:10: 2f:3d:69:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBFg/t0sIBtlIwIkHUHeD8XfB6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTA5MDkwMjU2MTJaFw0yNTA5MTIwMzEyMTJaMDMxMTAvBgNV BAMTKEZFMjcxOUYxQTg5MjdENjlGNTkwQ0REOTY1MkI2NUY2OTYxM0FEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75rixxMrZodhH0VOUrMGpTi/e HOoH1caSTExcj1gQ8559lABP2ufup/7IUPRYOmomTFAzrb/T6kAhYIkFeLtpMCiH Dg4MRkviejxGQPhtoFXXMKTpnRYTA01iZuXLb3eV6U41j7DwIe3S58v5yithY0UK cO1YVI2CniTQViSP8xiJCgQ5ZOqGyA3rxmC/ZJ9/mg1Yd1CYw6A9SipqF2TxyMKF WJw29rRvG1v/D0r/w0oi9a3ii9Cl0JsEgLE5OuS88/uH9u26f1J2IYdcVHt6otvO mebnvWHlPwTECiBGV8TFlVsrNoMnBXUS7EVgNdg0Ew+DA2lGVP9eoXbSqun9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/icZ8aiSfWn1kM3ZZStl9pYTrbcwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnaJQk2jU7bzns/xV3UUkipw0u5jMbANSUz oTdRVQziU+xJKILPQviAaWfuZ19qsTL1TpirbQ8KVXc76Xozm3wzjW+U0Wwm/qGC JIyfstwgMgODzlFhjTRwntPkv2u+iF/K2rxlkIXzBQmmjHlaMCH76HXHSpUvUtlX cLQrjRHSWpuiwLSjHEZyo56ysW5L0KMfeTLTvHiA052Qzr52Etgqoo3tT8azm05S B9EJJ5Scyr/FpkcCfL+5Pp8JZ91/apH6Wrg0KkaAqgcSEYQhEJvFyxhhcMMf/OZH soTQAYM1mxP/zc4YvI0oH0JJKcrmjCRkjfe1JQdplne8EC89aXc= -----END CERTIFICATE-----Generated at Tue Sep 9 09:13:03 2025 by rpki-client